This page is to develop the problem statements and material to frame research on user management.
Security
Passwords
no complexity rules or regular changes (against good practice)
no self-reset of password (adds admin burden)
Multi-factor authentication (now the norm and best practice)
Pass-through authentication for staff should be investigated (access is simpler)
User roles
Need to be reviewed and if necessary amended.
Monitoring
Monitoring access by users (to ID suspicious activity)
Background and links in Confluence
User management 2018 | ||
Series of meetings in 2020 to advance user management |
Possible further reading
Password standards | ||
ID and authentication |
Add Comment